pf (Packet Filter) is the TCP/IP packet filtering firewall subsystem on BSD systems.
3
votes
2answers
415 views
Letting NFS through a FreeBSD PF firewall
I'm trying to configure my firewall (PF) on FreeBSD to let NFS traffic through.
I know that NFS uses both TCP and UDP to connect to the client along with a bunch of daemons that use random port ...
1
vote
2answers
219 views
should I fix “No ALTQ support in kernel” to run the firewall?
I just messed with my pf.conf and ran pf and I got:
Enabling pf.
No ALTQ support in kernel
Of course the fix is to re-compile the kernel, but that article is for freebsd 7. I'm on FreeBSD 9.1
I ...
2
votes
1answer
297 views
NAT and source IP filtering in PF, using OpenBSD >= 4.7
I just read a book about PF (The Book Of PF, No Starch), but there's one question not answered by it.
If I have a gateway machine using two interfaces, $int_if and $ext_if, and I NAT the packages ...
3
votes
1answer
701 views
Is berkeley packet filter ported to linux?
I am doing some research to figure out what distro's of linux contain kernel packet filtering and are compatible with BPF.
http://kernelnewbies.org/Linux_3.0
http://lwn.net/Articles/437981/
These ...
2
votes
1answer
134 views
How to configure OpenBSD pf to only allow inbound from given countries?
I have an OpenBSD 5.2 box what's running a webserver on port 80 and an SSHD server on port 2222.
How can I configure OpenBSD's pf to only allow connections from given countries to port 80 and 2222?
1
vote
0answers
72 views
Perform Cisco's DNS Doctoring on FreeBSD
How to perform a change in the DNS response from a DNS server to be a different IP address than the DNS server actually answered for a given name?
...
3
votes
1answer
1k views
How to configure pfsense to NAT servers?
How can I configure pfsense so it will NAT servers so they can be accessed outside of the company? I tried to play around with the NAT settings, but didn't get anywhere. I want to be able to access ...
4
votes
1answer
189 views
Inserting a nat solution into a network while it's not the gateway
I have tried this a few different ways. Currently trying with pf on freebsd 8.2
I am trying to insert a nat solution into an existing network that will redirect traffic from an outside ip address to ...
7
votes
6answers
464 views
Can I use Unix to load-balance two Linux servers?
I'm trying to work out a solution in my head where two backend linux-servers run HTTP, SMTP, XMPP mirrored and should load balance connections between them.
My current solution is an OpenBSD box ...
3
votes
1answer
260 views
Converting a line from a firewall on OpenBSD 4.9 to OpenBSD 4.7
What is the OpenBSD 4.7 equivalent of this line from OpenBSD 4.9 for use with pf?
no nat on egress proto udp from 192.168.1.10 port 4672 to any
0
votes
1answer
332 views
port redirection with PF under OpenBSD
i need to do a setting a bit unusual.
I have 3 machines with public Ips.
I want to use one of them as a load balancer for the 2 others.
My machine >> machine1 who redirect the connection to machine ...
3
votes
1answer
224 views
Setting up the firewall for amule on OpenBSD 4.7 gateway
I'm trying to properly setup the firewall on my gateway (OpenBSD 4.7) using pf to allow amule (on 10.0.0.104) to operate properly as discussed here:
Now I know pf has changed a bit from OpenBSD 4.7 ...
2
votes
1answer
1k views
iptables/pf rule to only allow XY application/user?
I think there is no iptables/pf solution to only allow an XY application on e.g.: outbound tcp port 80, eth0. So if I have a userid: "500" then how could I block any other communications then the ...
